Critical 9.8
CVE-2026-13639
Cerber Ransomware Exploits Synology NAS Vulnerabilities in Active Exploitation Campaign
Vendor / product: Synology NAS DiskStation Manager (DSM)
Event date: 2026-10-01
Public PoC: Yes
First tracked by RiskWire: 2026-10-31
Named threat actors
Cerber
Sources & citations (19)
- Synology製NASでランサムウェア被害。9月18日の修正未適用なら攻撃のおそれ gazlog.jp · 2026-10-31
- 사진-문서 네트워크 저장장치도 보안 취약…패치 권고 n.news.naver.com · 2026-10-30
- 今次輪到 Synology NAS 中招!PHP2Shell 漏洞引爆全球勒索風暴 官方急推修補套件 news.now.com · 2026-10-30
- 舊版 DSM 淪勒索軟體目標,Synology 籲 NAS 用戶速更新 cdninfosecu.technews.tw · 2026-10-30
- Synology rushes out more PHP2Shell fixes as hackers target outdated NAS systems howtogeek.com · 2026-10-30
- Synology waarschuwt voor ransomware op nas'en die op verouderde firmware draaien tweakers.net · 2026-10-30
- Synology: Ransomware C3RB3R greift veraltete NAS-Systeme an stadt-bremerhaven.de · 2026-10-31
- Synology NAS-systemen via oud beveiligingslek getroffen door ransomware security.nl · 2026-10-30
- Synology связала атаки на NAS с уязвимостью DSM, закрытой в 2024 году trashexpert.ru · 2026-10-30
- Rançongiciel C3RB3R : des dizaines d'utilisateurs de NAS Synology signalent une attaque — Frandroid fr.headtopics.com · 2026-10-30
- Ransomware verschlüsselt Daten auf veralteten DSM-Versionen smarthomeassistent.de · 2026-10-30
- FRANDROID 🔵 Attention, des NAS Synology sont touchés par le rançongiciel C3RB3R : ce qu'il faut vérifier sur votre NAS shango.media · 2026-10-30
- 사진·문서 보관용 저장장치도 보안 위협…KISA, 보안패치 권고(종합) n.news.naver.com · 2026-10-30
- Synology Users Should Be Afraid Of C3RB3R Ransomware itnerd.blog · 2026-10-30
- 사진·문서 보관용 저장장치도 보안 위협…KISA, 보안패치 권고 n.news.naver.com · 2026-10-30
- Phát hiện lỗ hổng bảo mật trên thiết bị NAS Synology… phát hành bản vá cho 10 ứng dụng news.jkn.co.kr · 2026-10-30
- Synology NAS Security Vulnerability Confirmed... Patches Released for 10 Apps news.jkn.co.kr · 2026-10-30
- 백업 믿었는데 저장장치까지 인질로…KISA, 보안패치 긴급 권고 news.nate.com · 2026-10-30
- Synology 證實 PHP2Shell 波及十個套件 連 EOL 的 DSM 6.2 都有更新 techapple.com · 2026-10-31
References
See CVE-2026-13639 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →